<?php

class NewsController extends Controller
{
	/**
	 * @var string the default layout for the views. Defaults to '//layouts/column2', meaning
	 * using two-column layout. See 'protected/views/layouts/column2.php'.
	 */
	public $layout='/layouts/admin';

	/**
	 * @return array action filters
	 */
	public function filters()
	{
		return array(
			'accessControl', // perform access control for CRUD operations
			//'postOnly', // we only allow deletion via POST request
		);
	}

	/**
	 * Specifies the access control rules.
	 * This method is used by the 'accessControl' filter.
	 * @return array access control rules
	 */
	public function accessRules()
	{
		return array(
			array('allow',  // allow all users to perform 'index' and 'view' actions
				'actions'=>array('index','view'),
				'users'=>array('*'),
			),
			array('allow', // allow authenticated user to perform 'create' and 'update' actions
				'actions'=>array('create','update', 'Ckupload','saveorder', 'updateorder'),
				'users'=>array('*'),
			),
			array('allow', // allow admin user to perform 'admin' and 'delete' actions
				'actions'=>array('admin','delete'),
				'users'=>array('*'),
			),
			array('deny',  // deny all users
				'users'=>array('*'),
			),
		);
	}

	/**
	 * Displays a particular model.
	 * @param integer $id the ID of the model to be displayed
	 */
	public function actionView($id)
	{
		$this->render('view',array(
			'model'=>$this->loadModel($id),
		));
	}

	/**
	 * Creates a new model.
	 * If creation is successful, the browser will be redirected to the 'view' page.
	 */
	public function actionCreate()
	{
            $model=new News;

            // Uncomment the following line if AJAX validation is needed
            // $this->performAjaxValidation($model);

            if(isset($_POST['News']))
            {
                $rnd = rand(0,9999);  // generate random number between 0-9999

                $model->attributes=$_POST['News'];
            
                $uploadedFile = CUploadedFile::getInstance($model,'image');
                $fileName = "{$rnd}-{$uploadedFile}";  // random number + file name
                $model->image = $fileName;

                $model->created = date('Y-m-d H:i:s');
                $model->updated = date('Y-m-d H:i:s');
                if($model->save()){
                    $model->order = $model->id;
                    $model->update();
                    $uploadedFile->saveAs(Yii::app ()->basePath . '/../data/images/img-news/'.$fileName);
                    $this->redirect(array('index'));
                }
            }

            $this->render('create',array(
		'model'=>$model,
            ));
	}

    /**
     * Updates a particular model.
     * If update is successful, the browser will be redirected to the 'view' page.
     * @param integer $id the ID of the model to be updated
     */
    public function actionUpdate($id)
    {
            $model=$this->loadModel($id);

            // Uncomment the following line if AJAX validation is needed
            // $this->performAjaxValidation($model);

            if(isset($_POST['News']))
            {
        $rnd = rand(0,9999);  // generate random number between 0-9999

        $model->attributes=$_POST['News'];
        $uploadedFile = CUploadedFile::getInstance($model,'image');
        $fileName = "{$rnd}-{$uploadedFile}";  // random number + file name
        if(!empty($uploadedFile))
            $model->image = $fileName;

        $model->updated = date('Y-m-d H:i:s');
        if($model->save()){
            if(!empty($uploadedFile))
                $uploadedFile->saveAs(Yii::app ()->basePath . '/../data/images/img-news/'.$fileName);
            $this->redirect(array('index'));
        }
            }

            $this->render('update',array(
                    'model'=>$model,
            ));
    }

    /**
     * Deletes a particular model.
     * If deletion is successful, the browser will be redirected to the 'admin' page.
     * @param integer $id the ID of the model to be deleted
     */
    public function actionDelete($id)
    {
    $this->loadModel($id)->delete();

            // if AJAX request (triggered by deletion via admin grid view), we should not redirect the browser
            if(!isset($_GET['ajax']))
                    $this->redirect(isset($_POST['returnUrl']) ? $_POST['returnUrl'] : array('index'));
    }

    /**
     * Lists all models.
     */
    public function actionIndex()
    {
        $sort = '`order` desc';
        $criteria = new CDbCriteria();
        $criteria->order = $sort;

        $item_count = News::model()->count($criteria);

        $pages = new CPagination($item_count);
        $pages->setPageSize(Yii::app()->params['listPerPage']);
        $pages->applyLimit($criteria);  // the trick is here!

        $this->render('index',array(
            'model'=> News::model()->findAll($criteria), // must be the same as $item_count
            'item_count'=>$item_count,
            'page_size'=>Yii::app()->params['listPerPage'],
            'items_count'=>$item_count,
            'pages'=>$pages,
            'sort'=>$sort
        ));
    }

        /*
     * ajax update order category
     */
    public function actionUpdateOrder() 
    {
        if(isset($_POST['newsId']))
        {
            $newsModel = new News();
            $result = $newsModel->updateOrder($_POST['newsId'], $_POST['newsIdChange']);
        }

    }
    
    /*
     * save order subcategory
     */
    public function actionSaveOrder() 
    {
       if(is_array($_POST)) { 
            foreach($_POST['id'] as $key=>$id) {
                News::model()->updateByPk($id, array('order'=>$_POST['order'][$key]));
            }
        }
        
        $this->redirect('/admin/news/index');
    }
    
    /**
     * Manages all models.
     */
    public function actionAdmin()
    {
            $model=new News('search');
            $model->unsetAttributes();  // clear any default values
            if(isset($_GET['News']))
                    $model->attributes=$_GET['News'];

            $this->render('admin',array(
                    'model'=>$model,
            ));
    }

	/**
	 * Returns the data model based on the primary key given in the GET variable.
	 * If the data model is not found, an HTTP exception will be raised.
	 * @param integer $id the ID of the model to be loaded
	 * @return News the loaded model
	 * @throws CHttpException
	 */
	public function loadModel($id)
	{
		$model=News::model()->findByPk($id);
		if($model===null)
			throw new CHttpException(404,'The requested page does not exist.');
		return $model;
	}

	/**
	 * Performs the AJAX validation.
	 * @param News $model the model to be validated
	 */
	protected function performAjaxValidation($model)
	{
		if(isset($_POST['ajax']) && $_POST['ajax']==='news-form')
		{
			echo CActiveForm::validate($model);
			Yii::app()->end();
		}
	}
	
	public function actionCkupload()
    {
//echo realpath(Yii::app()->basePath);exit;
        $upload = '/data/upload/news/'. date('YmdHi') ."_".$_FILES['upload']['name'];
        $url = realpath(Yii::app()->basePath) . '/..'. $upload;
    
        //extensive suitability check before doing anything with the file...
        if (($_FILES['upload'] == "none") OR (empty($_FILES['upload']['name'])) ) {
            $message = "No file uploaded.";
        } else if ($_FILES['upload']["size"] == 0) {
           $message = "The file is of zero length.";
        } else if (($_FILES['upload']["type"] != "image/pjpeg") AND ($_FILES['upload']["type"] != "image/jpeg") AND ($_FILES['upload']["type"] != "image/png")) {
           $message = "The image must be in either JPG or PNG format. Please upload a JPG or PNG instead.";
        } else if (!is_uploaded_file($_FILES['upload']["tmp_name"])) {
           $message = "You may be attempting to hack our server. We're on to you; expect a knock on the door sometime soon.";
        } else {
            $message = "";
            $move = @ move_uploaded_file($_FILES['upload']['tmp_name'], $url);
            if(!$move) {
                $message = "Error moving uploaded file. Check the script is granted Read/Write/Modify permissions.";
            }
            $url = $upload;
        }
 
        $funcNum = $_GET['CKEditorFuncNum'] ;
        echo "<script type='text/javascript'>window.parent.CKEDITOR.tools.callFunction($funcNum, '$url', '$message');</script>";
        exit;
    }
}
